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CLAIMS 

1. (Currently Amended) A method of capturing communication associated 
information (CAI) of a communication between a subject and an associate, the method 
comprising the steps of: 

intercepting the communication, the communication comprising at least one 
packet and each packet comprising CAI; 

providing an application identifier (AID) in the at least one packet of the 
communication, the AID identifying the format of the CAI; 

extracting in accordance with the AID the CAI from the at least one packet for 
reporting; 

determining whether the extracted CAI is a new instance of the CAI; and 
reporting a first message to a Law Enforcement Agency (LEA) in response to a 

determination that the extracted CAI is the new instance of the CAI^ [[.]] 

determining whether a predetermined amount of time has elapsed between 

packets of the at least one packet of the communication, the packets being identified by 

the CAI; and 

reporting a second message to an LEA in response to a determination that the 
given amount of time has elapsed, wherein the second message represents a timeout 
indication. 

2. (Cancelled) The method of Claim 1, wherein the method further comprises 
the steps of: 

determining whether a given amount of time has elapsed between packets of the 
at least one packet of the communication, the packets being identified by the CAI; and 

reporting a second message in response to a determination that the given amount 
of time has elapsed. 

3. (Currently Amended) The method of Claim 1 2, wherein the second 
message comprises at least one of a subject identifier, a time stamp indicating when the 
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message was sent, the IP address of the subject, a packet direction indicator identifying 
whether the message was sent or received by the subject, the IP address of the associate, a 
first instance indicator identifying the new instance of the CAI, and a counter indicating 
the number of packets identified by the CAI seen since a last message. 

4. (Original) The method of Claim 1 , wherein the method further comprises 
the steps of: 

determining whether a given number of packets of the at least one packet of the 
communication has been intercepted, the packets being identified by the CAI; and 

reporting a third message in response to a determination that the given number of 
packets identified by the CAI has been intercepted. 

5. (Original) The method of Claim 4, wherein the third message comprises at 
least one of a subject identifier, a time stamp indicating when the message was sent, the 
IP address of the subject, a packet direction indicator identifying whether the message 
was sent or received by the subject, the IP address of the associate, a first instance 
indicator identifying the new instance of the CAI, and a counter indicating the number of 
packets identified by the CAI seen since a last message. 

6. (Original) The method of Claim 1, wherein the AID is located in the 
Network Layer 3. 

7. (Original) The method of Claim 1, wherein the AID is located in the 
protocol field of the Network Layer 3. 

8. (Original) The method of Claim 1, wherein the AID is located in the 
optional field of the Network Layer 3. 

9. (Original) The method of Claim 1, wherein the method further comprises 
the step of: 
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providing an AID-tag in the at least one packet of the communication, the AID- 
tag indicating the presence of the AID. 

10. (Original) The method of Claim 1, wherein the method further comprises 
the steps of: 

providing an AID-tag in the at least one packet of the communication, wherein the 
AID-tag indicates the presence of the AID, and wherein the AID-tag is located in the 
protocol field of the Network Layer 3. 

1 1 . (Original) The method of Claim 1 , wherein the first message comprises at 
least one of a subject identifier, a time stamp indicating when the message was sent, the 
IP address of the subject, a packet direction indicator identifying whether the message 
was sent or received by the subject, the IP address of the associate, a first instance 
indicator identifying the new instance of the CAI, and a counter indicating the number of 
packets identified by the CAI seen since a last message. 

12. (Currently Amended) A method of consolidating at least one packet of a 
communication between a subject and an associate, the method comprising the steps of: 

receiving at least one packet of the communication, each packet comprising 
communication associated information (CAI); 

determining whether a packet is a new instance of the CAI 

reporting the CAI in response to a determination that the packet is a new instance 
of the CAI to an LEA; and 

determining whether a predetermined amount of time has elapsed between 
packets of the at least one packet; 

reporting a timeout indication to an LEA in response to a determination that the 
predetermined amount of time has elapsed: and 

reporting the CAI periodically to an LEA in response to a determination that the 
packet is a subsequent packet. 
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13. (Original) The method of Claim 12, wherein the step of determining 
whether a packet is a new instance of the CAI is performed by comparing the CAI with a 
previous CAI. 

14. (Original) The method of Claim 12, wherein the step of determining 
whether a packet is a new instance CAI is performed by allowing a given amount of time 
to elapse since the receipt of the at least one packet. 

15. (Original) The method of Claim 12, wherein the CAI report comprises at 
least one of a subject identifier, a time stamp indicating when the message was sent, the 
IP address of the subject, a packet direction indicator identifying whether the message 
was sent or received by the subject, an associate identifier, a first instance indicator 
identifying the new instance of the CAI, and a counter indicating the number of packets 
identified by the CAI seen since a last report. 

16. (Cancelled) A method of providing access to communication associated 
information (CAI) of at least one packet of a communication between a subject and an 
associate, the method comprising the steps of: 

providing an application identifier (AID) in the at least one packet, the AID 
indicating a format of the CAI in the at least one packet; 

intercepting at least one of the at least one packet of the communication with the 
subject; 

extracting in accordance with the AID the CAI from the packet; 
formatting a message comprising at least a portion of the extracted CAI; and 
providing to an LEA access to the message. 

17. (Cancelled) The method of Claim 16, wherein the message comprises at 
least one of a subject identifier, a time stamp indicating when the message was sent, the 
IP address of the subject, a packet direction indicator identifying whether the message 
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was sent or received by the subject, an associate identifier, a first instance indicator 
identifying the new instance of the CAI, and a counter indicating the number of packets 
identified by the CAI seen since a last message. 

18. (Cancelled) A method of indicating the format of CAI in at least one 
packet of a communication, the method comprising the steps of: 

providing an application identifier tag in the at least one packet, the application 
identifier indicating the presence of an application identifier and communication 
associated information (CAI); and 

providing the application identifier in the at least one packet to an LEA, the 
application identifier indicating the format of the CAI. 

19. (Cancelled) The method of Claim 18, wherein the application identifier 
tag is located in the protocol field of the Network Layer 3. 

20. (Cancelled) The method of Claim 18, wherein the application identifier is 
located in the optional field of the Network Layer 3. 

21. (Cancelled) A method of indicating the format of communication 
associated information (CAI) in at least one packet of a communication by providing to 
an LEA an application identifier in the least one packet. 

22. (Cancelled) The method of Claim 21, wherein the application identifier is 
located in the protocol field of the Network Layer 3. 

23. (Currently Amended) An apparatus for providing access to 
communication associated information (CAI) of a communication between a subject and 
an associate, the apparatus comprising: 

means for intercepting the communication, the communication comprising at least 
one packet and each packet comprising CAI; 
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means for providing an application identifier (AID) in the at least one packet of 
the communication, the AID identifying the format of the CAI; 

means for extracting in accordance with the AID the CAI from the at least one 
packet for reporting; 

means for determining whether the extracted CAI is a new instance of the CAI; 

U11U- 

means for reporting to an LEA a first message in response to a determination that 
the extracted CAI is the new instance of the CAI; [[.]] 

means for determining whether a predetermined amount of time has elapsed 
between packets of the at least one packet of the communication, the packets being 
identified by the CAI; and 

means for reporting to an LEA a second message in response to a determination 
that the given amount of time has elapsed, wherein the second message represents a 
timeout indication. 

24. (Cancelled) The apparatus of Claim 23, wherein the apparatus further 
comprises: 

means for determining whether a given amount of time has elapsed between 
packets of the at least one packet of a communication, the packets being identified by the 
CAI; and 

means for reporting a second message in response to a determination that the 
given amount of time has elapsed. 

25. (Original) The apparatus of Claim 23, wherein the apparatus further 
comprises: 

means for determining whether a given number of packets of the at least one 
packet of the communication has been intercepted, the packets being identified by the 
CAI; and 
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means for reporting an intermediate CAI message in response to a determination 
that the given number of packets of the at least one packet of the communication has been 
intercepted. 

26. (Original) The apparatus of Claim 23, wherein the apparatus further 
comprises: 

means providing an AID-tag in the at least one packet of the communication, the 
AID-tag indicating the presence of the AID. 

27. (Original) The apparatus of Claim 23, wherein the apparatus further 
comprises: 

means for providing an AID-tag in the at least one packet of the communication, 
wherein the AID-tag indicates the presence of the AID, and wherein the AID-tag is 
located in the protocol field of the Network Layer 3. 

28. (Currently Amended) An apparatus for consolidating at least one packet of 
a communication between a subject and an associate, the apparatus comprising: 

means for receiving at least one packet of the communication, each packet 
comprising communication associated information (CAI); 

means for determining whether a packet is a new instance of CAI; 

means for reporting to an LEA the CAI in response to a determination that the 
packet is the new instance of CAI; and 

means for determining whether a predetermined amount of time has elapsed 
between packets of the at least one packet; 

means for reporting a timeout indication to an LEA in response to a determination 
that the predetermined amount of time has elapsed; and 

means for reporting to an LEA the CAI periodically in response to a 
determination that the packet is a subsequent packet. 
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29. (Cancelled) An apparatus for providing access to communication 
associated information (CAI) of at least one packet of a communication with a subject, 
the apparatus comprising: 

means for providing an application identifier (AID) in the at least one packet, the 
AID indicating a format of the CAI in the at least one packet; 

means for intercepting at least one of the at least one packet of the communication 
with the subject; 

means for extracting in accordance with the AID the CAI from the packet; 
means for formatting a message from the extracted CAI; and 
means for providing to an LEA access to the CAI message. 

30. (Cancelled) An apparatus for indicating the format of communication 
associated information (CAI) in at least one packet of a communication, the method 
comprising the steps of: 

means for providing an application identifier tag in the at least one packet, the 
application identifier indicating the presence of an application identifier and CAI; and 

means for providing the application identifier in the at least one packet to an LEA, 
the application identifier indicating the format of the CAI. 



-9- 



